Cloud Hunting Data Sources
The telemetry a threat hunter draws on to hunt in cloud environments, such as control-plane and audit logs, identity sign-in logs, network flow logs, and managed detection findings. They are the raw material for cloud hunts.
Concept Neighborhood
Start here
Hunt Hypothesis Library
The most substantial related concept here, covered by 6 lessons.
Hunt Hypothesis LibraryStart here
6
lessons
Identity Hunting Value
6
lessons
Impossible Travel Hunting
6
lessons
PEAK Hunting Framework
6
lessons
Cloud Detection
1
lesson
Cloud Network Monitoring
1
lesson
Show 1 more connection
Related Lessons
6 lessons cover this conceptPreparing a Defensible Hunt
SOC Analyst
Living-Off-The-Land Behavior Chains
SOC Analyst
Cloud Control-Plane and Workload Hunts
SOC Analyst
Identity, Session, and Token Hunts
SOC Analyst
Persistence, Memory, and Telemetry Evasion
SOC Analyst
Hunt Program Decisions and Measurement
SOC Analyst
Sign in to open lesson content directly.